PyPI - pulumi-snowflake - Versions diffs - 0.50.2a1709892015__py3-none-any.whl → 1.2.0a1736835738__py3-none-any.whl - Mend

pulumi-snowflake 0.50.2a1709892015py3-none-any.whl → 1.2.0a1736835738py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of pulumi-snowflake might be problematic. Click here for more details.

Files changed (182) hide show

pulumi_snowflake/__init__.py +224 -172
pulumi_snowflake/_inputs.py +52854 -1662
pulumi_snowflake/_utilities.py +41 -5
pulumi_snowflake/account.py +188 -214
pulumi_snowflake/account_authentication_policy_attachment.py +149 -0
pulumi_snowflake/account_parameter.py +21 -44
pulumi_snowflake/account_password_policy_attachment.py +7 -28
pulumi_snowflake/account_role.py +250 -0
pulumi_snowflake/alert.py +38 -43
pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +704 -0
pulumi_snowflake/api_authentication_integration_with_client_credentials.py +657 -0
pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +692 -0
pulumi_snowflake/api_integration.py +35 -50
pulumi_snowflake/authentication_policy.py +622 -0
pulumi_snowflake/config/__init__.pyi +76 -99
pulumi_snowflake/config/outputs.py +5 -0
pulumi_snowflake/config/vars.py +93 -124
pulumi_snowflake/cortex_search_service.py +596 -0
pulumi_snowflake/database.py +819 -209
pulumi_snowflake/database_role.py +81 -40
pulumi_snowflake/dynamic_table.py +44 -47
pulumi_snowflake/email_notification_integration.py +35 -26
pulumi_snowflake/{unsafe_execute.py → execute.py} +36 -139
pulumi_snowflake/external_function.py +54 -71
pulumi_snowflake/external_oauth_integration.py +593 -538
pulumi_snowflake/external_table.py +67 -86
pulumi_snowflake/external_volume.py +382 -0
pulumi_snowflake/failover_group.py +59 -96
pulumi_snowflake/file_format.py +33 -24
pulumi_snowflake/function_java.py +1211 -0
pulumi_snowflake/function_javascript.py +882 -0
pulumi_snowflake/function_python.py +1212 -0
pulumi_snowflake/function_scala.py +1212 -0
pulumi_snowflake/function_sql.py +835 -0
pulumi_snowflake/get_account_roles.py +129 -0
pulumi_snowflake/get_accounts.py +53 -22
pulumi_snowflake/get_alerts.py +22 -5
pulumi_snowflake/get_connections.py +109 -0
pulumi_snowflake/get_cortex_search_services.py +216 -0
pulumi_snowflake/get_current_account.py +24 -9
pulumi_snowflake/get_current_role.py +14 -7
pulumi_snowflake/get_database.py +25 -5
pulumi_snowflake/get_database_role.py +162 -0
pulumi_snowflake/get_database_roles.py +79 -43
pulumi_snowflake/get_databases.py +91 -69
pulumi_snowflake/get_dynamic_tables.py +36 -19
pulumi_snowflake/get_external_functions.py +28 -5
pulumi_snowflake/get_external_tables.py +28 -5
pulumi_snowflake/get_failover_groups.py +18 -7
pulumi_snowflake/get_file_formats.py +28 -5
pulumi_snowflake/get_functions.py +28 -5
pulumi_snowflake/get_grants.py +207 -80
pulumi_snowflake/get_masking_policies.py +91 -47
pulumi_snowflake/get_materialized_views.py +28 -5
pulumi_snowflake/get_network_policies.py +129 -0
pulumi_snowflake/get_parameters.py +38 -11
pulumi_snowflake/get_pipes.py +28 -5
pulumi_snowflake/get_procedures.py +28 -5
pulumi_snowflake/get_resource_monitors.py +37 -20
pulumi_snowflake/get_row_access_policies.py +91 -47
pulumi_snowflake/get_schemas.py +145 -37
pulumi_snowflake/get_secrets.py +200 -0
pulumi_snowflake/get_security_integrations.py +129 -0
pulumi_snowflake/get_sequences.py +28 -5
pulumi_snowflake/get_shares.py +18 -5
pulumi_snowflake/get_stages.py +28 -5
pulumi_snowflake/get_storage_integrations.py +16 -5
pulumi_snowflake/get_streamlits.py +170 -0
pulumi_snowflake/get_streams.py +114 -50
pulumi_snowflake/get_system_generate_scim_access_token.py +18 -5
pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +32 -7
pulumi_snowflake/get_system_get_private_link_config.py +121 -6
pulumi_snowflake/get_system_get_snowflake_platform_info.py +15 -7
pulumi_snowflake/get_tables.py +28 -5
pulumi_snowflake/get_tags.py +130 -0
pulumi_snowflake/get_tasks.py +134 -50
pulumi_snowflake/get_users.py +116 -40
pulumi_snowflake/get_views.py +114 -50
pulumi_snowflake/get_warehouses.py +79 -22
pulumi_snowflake/grant_account_role.py +28 -61
pulumi_snowflake/grant_application_role.py +257 -0
pulumi_snowflake/grant_database_role.py +35 -108
pulumi_snowflake/grant_ownership.py +382 -0
pulumi_snowflake/grant_privileges_to_account_role.py +42 -78
pulumi_snowflake/grant_privileges_to_database_role.py +37 -223
pulumi_snowflake/grant_privileges_to_share.py +96 -44
pulumi_snowflake/legacy_service_user.py +3670 -0
pulumi_snowflake/managed_account.py +42 -9
pulumi_snowflake/masking_policy.py +213 -306
pulumi_snowflake/materialized_view.py +62 -67
pulumi_snowflake/network_policy.py +217 -57
pulumi_snowflake/network_policy_attachment.py +7 -32
pulumi_snowflake/network_rule.py +473 -0
pulumi_snowflake/notification_integration.py +51 -82
pulumi_snowflake/oauth_integration_for_custom_clients.py +906 -0
pulumi_snowflake/{oauth_integration.py → oauth_integration_for_partner_applications.py} +191 -188
pulumi_snowflake/object_parameter.py +12 -99
pulumi_snowflake/outputs.py +49200 -2928
pulumi_snowflake/password_policy.py +41 -28
pulumi_snowflake/pipe.py +33 -0
pulumi_snowflake/primary_connection.py +330 -0
pulumi_snowflake/procedure_java.py +1273 -0
pulumi_snowflake/procedure_javascript.py +895 -0
pulumi_snowflake/procedure_python.py +1226 -0
pulumi_snowflake/procedure_scala.py +1273 -0
pulumi_snowflake/procedure_sql.py +895 -0
pulumi_snowflake/provider.py +378 -613
pulumi_snowflake/pulumi-plugin.json +2 -1
pulumi_snowflake/resource_monitor.py +118 -323
pulumi_snowflake/row_access_policy.py +200 -145
pulumi_snowflake/{saml_integration.py → saml2_integration.py} +356 -295
pulumi_snowflake/schema.py +949 -174
pulumi_snowflake/scim_integration.py +286 -105
pulumi_snowflake/secondary_connection.py +339 -0
pulumi_snowflake/secondary_database.py +1080 -0
pulumi_snowflake/secret_with_authorization_code_grant.py +548 -0
pulumi_snowflake/secret_with_basic_authentication.py +500 -0
pulumi_snowflake/secret_with_client_credentials.py +511 -0
pulumi_snowflake/secret_with_generic_string.py +452 -0
pulumi_snowflake/sequence.py +9 -30
pulumi_snowflake/service_user.py +3585 -0
pulumi_snowflake/share.py +35 -26
pulumi_snowflake/shared_database.py +939 -0
pulumi_snowflake/stage.py +95 -80
pulumi_snowflake/storage_integration.py +48 -2
pulumi_snowflake/stream_on_directory_table.py +517 -0
pulumi_snowflake/stream_on_external_table.py +632 -0
pulumi_snowflake/stream_on_table.py +666 -0
pulumi_snowflake/stream_on_view.py +666 -0
pulumi_snowflake/streamlit.py +671 -0
pulumi_snowflake/table.py +86 -93
pulumi_snowflake/table_column_masking_policy_application.py +7 -14
pulumi_snowflake/table_constraint.py +29 -168
pulumi_snowflake/tag.py +142 -70
pulumi_snowflake/tag_association.py +40 -211
pulumi_snowflake/task.py +3048 -414
pulumi_snowflake/user.py +3351 -380
pulumi_snowflake/user_authentication_policy_attachment.py +197 -0
pulumi_snowflake/user_password_policy_attachment.py +7 -6
pulumi_snowflake/user_public_keys.py +5 -0
pulumi_snowflake/view.py +466 -211
pulumi_snowflake/warehouse.py +184 -164
{pulumi_snowflake-0.50.2a1709892015.dist-info → pulumi_snowflake-1.2.0a1736835738.dist-info}/METADATA +7 -6
pulumi_snowflake-1.2.0a1736835738.dist-info/RECORD +148 -0
{pulumi_snowflake-0.50.2a1709892015.dist-info → pulumi_snowflake-1.2.0a1736835738.dist-info}/WHEEL +1 -1
pulumi_snowflake/account_grant.py +0 -339
pulumi_snowflake/database_grant.py +0 -491
pulumi_snowflake/external_table_grant.py +0 -686
pulumi_snowflake/failover_group_grant.py +0 -388
pulumi_snowflake/file_format_grant.py +0 -631
pulumi_snowflake/function.py +0 -868
pulumi_snowflake/function_grant.py +0 -741
pulumi_snowflake/get_role.py +0 -117
pulumi_snowflake/get_roles.py +0 -116
pulumi_snowflake/grant_privileges_to_role.py +0 -667
pulumi_snowflake/integration_grant.py +0 -436
pulumi_snowflake/masking_policy_grant.py +0 -538
pulumi_snowflake/materialized_view_grant.py +0 -685
pulumi_snowflake/pipe_grant.py +0 -583
pulumi_snowflake/procedure.py +0 -883
pulumi_snowflake/procedure_grant.py +0 -741
pulumi_snowflake/resource_monitor_grant.py +0 -383
pulumi_snowflake/role.py +0 -269
pulumi_snowflake/role_grants.py +0 -348
pulumi_snowflake/role_ownership_grant.py +0 -334
pulumi_snowflake/row_access_policy_grant.py +0 -536
pulumi_snowflake/schema_grant.py +0 -643
pulumi_snowflake/sequence_grant.py +0 -631
pulumi_snowflake/session_parameter.py +0 -328
pulumi_snowflake/stage_grant.py +0 -631
pulumi_snowflake/stream.py +0 -610
pulumi_snowflake/stream_grant.py +0 -631
pulumi_snowflake/table_grant.py +0 -673
pulumi_snowflake/tag_grant.py +0 -528
pulumi_snowflake/tag_masking_policy_association.py +0 -210
pulumi_snowflake/task_grant.py +0 -631
pulumi_snowflake/user_grant.py +0 -390
pulumi_snowflake/user_ownership_grant.py +0 -286
pulumi_snowflake/view_grant.py +0 -701
pulumi_snowflake/warehouse_grant.py +0 -436
pulumi_snowflake-0.50.2a1709892015.dist-info/RECORD +0 -136
{pulumi_snowflake-0.50.2a1709892015.dist-info → pulumi_snowflake-1.2.0a1736835738.dist-info}/top_level.txt +0 -0

pulumi_snowflake/external_oauth_integration.py CHANGED Viewed

@@ -4,10 +4,17 @@
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from . import _utilities
+from . import outputs
+from ._inputs import *
 __all__ = ['ExternalOauthIntegrationArgs', 'ExternalOauthIntegration']
@@ -15,67 +22,67 @@ __all__ = ['ExternalOauthIntegrationArgs', 'ExternalOauthIntegration']
 class ExternalOauthIntegrationArgs:
     def __init__(__self__, *,
                  enabled: pulumi.Input[bool],
-                 issuer: pulumi.Input[str],
-                 snowflake_user_mapping_attribute: pulumi.Input[str],
-                 token_user_mapping_claims: pulumi.Input[Sequence[pulumi.Input[str]]],
-                 type: pulumi.Input[str],
-                 allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 any_role_mode: Optional[pulumi.Input[str]] = None,
-                 audience_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 blocked_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_issuer: pulumi.Input[str],
+                 external_oauth_snowflake_user_mapping_attribute: pulumi.Input[str],
+                 external_oauth_token_user_mapping_claims: pulumi.Input[Sequence[pulumi.Input[str]]],
+                 external_oauth_type: pulumi.Input[str],
                  comment: Optional[pulumi.Input[str]] = None,
-                 jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 name: Optional[pulumi.Input[str]] = None,
-                 rsa_public_key: Optional[pulumi.Input[str]] = None,
-                 rsa_public_key2: Optional[pulumi.Input[str]] = None,
-                 scope_delimiter: Optional[pulumi.Input[str]] = None,
-                 scope_mapping_attribute: Optional[pulumi.Input[str]] = None):
+                 external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_any_role_mode: Optional[pulumi.Input[str]] = None,
+                 external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_rsa_public_key: Optional[pulumi.Input[str]] = None,
+                 external_oauth_rsa_public_key2: Optional[pulumi.Input[str]] = None,
+                 external_oauth_scope_delimiter: Optional[pulumi.Input[str]] = None,
+                 external_oauth_scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
+                 name: Optional[pulumi.Input[str]] = None):
         """
         The set of arguments for constructing a ExternalOauthIntegration resource.
         :param pulumi.Input[bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
-        :param pulumi.Input[str] issuer: Specifies the URL to define the OAuth 2.0 authorization server.
-        :param pulumi.Input[str] snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record.
-        :param pulumi.Input[str] type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_roles: Specifies the list of roles that the client can set as the primary role.
-        :param pulumi.Input[str] any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] audience_urls: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles: Specifies the list of roles that a client cannot set as the primary role. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
+        :param pulumi.Input[str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
+        :param pulumi.Input[str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
         :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3.
-        :param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
-        :param pulumi.Input[str] rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers.
-        :param pulumi.Input[str] rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation.
-        :param pulumi.Input[str] scope_delimiter: Specifies the scope delimiter in the authorization token.
-        :param pulumi.Input[str] scope_mapping_attribute: Specifies the access token claim to map the access token to an account role.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
+        :param pulumi.Input[str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
+        :param pulumi.Input[str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
         pulumi.set(__self__, "enabled", enabled)
-        pulumi.set(__self__, "issuer", issuer)
-        pulumi.set(__self__, "snowflake_user_mapping_attribute", snowflake_user_mapping_attribute)
-        pulumi.set(__self__, "token_user_mapping_claims", token_user_mapping_claims)
-        pulumi.set(__self__, "type", type)
-        if allowed_roles is not None:
-            pulumi.set(__self__, "allowed_roles", allowed_roles)
-        if any_role_mode is not None:
-            pulumi.set(__self__, "any_role_mode", any_role_mode)
-        if audience_urls is not None:
-            pulumi.set(__self__, "audience_urls", audience_urls)
-        if blocked_roles is not None:
-            pulumi.set(__self__, "blocked_roles", blocked_roles)
+        pulumi.set(__self__, "external_oauth_issuer", external_oauth_issuer)
+        pulumi.set(__self__, "external_oauth_snowflake_user_mapping_attribute", external_oauth_snowflake_user_mapping_attribute)
+        pulumi.set(__self__, "external_oauth_token_user_mapping_claims", external_oauth_token_user_mapping_claims)
+        pulumi.set(__self__, "external_oauth_type", external_oauth_type)
         if comment is not None:
             pulumi.set(__self__, "comment", comment)
-        if jws_keys_urls is not None:
-            pulumi.set(__self__, "jws_keys_urls", jws_keys_urls)
+        if external_oauth_allowed_roles_lists is not None:
+            pulumi.set(__self__, "external_oauth_allowed_roles_lists", external_oauth_allowed_roles_lists)
+        if external_oauth_any_role_mode is not None:
+            pulumi.set(__self__, "external_oauth_any_role_mode", external_oauth_any_role_mode)
+        if external_oauth_audience_lists is not None:
+            pulumi.set(__self__, "external_oauth_audience_lists", external_oauth_audience_lists)
+        if external_oauth_blocked_roles_lists is not None:
+            pulumi.set(__self__, "external_oauth_blocked_roles_lists", external_oauth_blocked_roles_lists)
+        if external_oauth_jws_keys_urls is not None:
+            pulumi.set(__self__, "external_oauth_jws_keys_urls", external_oauth_jws_keys_urls)
+        if external_oauth_rsa_public_key is not None:
+            pulumi.set(__self__, "external_oauth_rsa_public_key", external_oauth_rsa_public_key)
+        if external_oauth_rsa_public_key2 is not None:
+            pulumi.set(__self__, "external_oauth_rsa_public_key2", external_oauth_rsa_public_key2)
+        if external_oauth_scope_delimiter is not None:
+            pulumi.set(__self__, "external_oauth_scope_delimiter", external_oauth_scope_delimiter)
+        if external_oauth_scope_mapping_attribute is not None:
+            pulumi.set(__self__, "external_oauth_scope_mapping_attribute", external_oauth_scope_mapping_attribute)
         if name is not None:
             pulumi.set(__self__, "name", name)
-        if rsa_public_key is not None:
-            pulumi.set(__self__, "rsa_public_key", rsa_public_key)
-        if rsa_public_key2 is not None:
-            pulumi.set(__self__, "rsa_public_key2", rsa_public_key2)
-        if scope_delimiter is not None:
-            pulumi.set(__self__, "scope_delimiter", scope_delimiter)
-        if scope_mapping_attribute is not None:
-            pulumi.set(__self__, "scope_mapping_attribute", scope_mapping_attribute)
     @property
     @pulumi.getter
@@ -90,464 +97,512 @@ class ExternalOauthIntegrationArgs:
         pulumi.set(self, "enabled", value)
     @property
-    @pulumi.getter
-    def issuer(self) -> pulumi.Input[str]:
+    @pulumi.getter(name="externalOauthIssuer")
+    def external_oauth_issuer(self) -> pulumi.Input[str]:
         """
         Specifies the URL to define the OAuth 2.0 authorization server.
         """
-        return pulumi.get(self, "issuer")
+        return pulumi.get(self, "external_oauth_issuer")
-    @issuer.setter
-    def issuer(self, value: pulumi.Input[str]):
-        pulumi.set(self, "issuer", value)
+    @external_oauth_issuer.setter
+    def external_oauth_issuer(self, value: pulumi.Input[str]):
+        pulumi.set(self, "external_oauth_issuer", value)
     @property
-    @pulumi.getter(name="snowflakeUserMappingAttribute")
-    def snowflake_user_mapping_attribute(self) -> pulumi.Input[str]:
+    @pulumi.getter(name="externalOauthSnowflakeUserMappingAttribute")
+    def external_oauth_snowflake_user_mapping_attribute(self) -> pulumi.Input[str]:
         """
-        Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record.
+        Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
         """
-        return pulumi.get(self, "snowflake_user_mapping_attribute")
+        return pulumi.get(self, "external_oauth_snowflake_user_mapping_attribute")
-    @snowflake_user_mapping_attribute.setter
-    def snowflake_user_mapping_attribute(self, value: pulumi.Input[str]):
-        pulumi.set(self, "snowflake_user_mapping_attribute", value)
+    @external_oauth_snowflake_user_mapping_attribute.setter
+    def external_oauth_snowflake_user_mapping_attribute(self, value: pulumi.Input[str]):
+        pulumi.set(self, "external_oauth_snowflake_user_mapping_attribute", value)
     @property
-    @pulumi.getter(name="tokenUserMappingClaims")
-    def token_user_mapping_claims(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
+    @pulumi.getter(name="externalOauthTokenUserMappingClaims")
+    def external_oauth_token_user_mapping_claims(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
         """
-        Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record.
+        Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "token_user_mapping_claims")
+        return pulumi.get(self, "external_oauth_token_user_mapping_claims")
-    @token_user_mapping_claims.setter
-    def token_user_mapping_claims(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
-        pulumi.set(self, "token_user_mapping_claims", value)
+    @external_oauth_token_user_mapping_claims.setter
+    def external_oauth_token_user_mapping_claims(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
+        pulumi.set(self, "external_oauth_token_user_mapping_claims", value)
     @property
-    @pulumi.getter
-    def type(self) -> pulumi.Input[str]:
+    @pulumi.getter(name="externalOauthType")
+    def external_oauth_type(self) -> pulumi.Input[str]:
         """
-        Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server.
+        Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
         """
-        return pulumi.get(self, "type")
+        return pulumi.get(self, "external_oauth_type")
-    @type.setter
-    def type(self, value: pulumi.Input[str]):
-        pulumi.set(self, "type", value)
+    @external_oauth_type.setter
+    def external_oauth_type(self, value: pulumi.Input[str]):
+        pulumi.set(self, "external_oauth_type", value)
     @property
-    @pulumi.getter(name="allowedRoles")
-    def allowed_roles(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    @pulumi.getter
+    def comment(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the list of roles that the client can set as the primary role.
+        Specifies a comment for the OAuth integration.
         """
-        return pulumi.get(self, "allowed_roles")
+        return pulumi.get(self, "comment")
-    @allowed_roles.setter
-    def allowed_roles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "allowed_roles", value)
+    @comment.setter
+    def comment(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "comment", value)
     @property
-    @pulumi.getter(name="anyRoleMode")
-    def any_role_mode(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthAllowedRolesLists")
+    def external_oauth_allowed_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token.
+        Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
         """
-        return pulumi.get(self, "any_role_mode")
+        return pulumi.get(self, "external_oauth_allowed_roles_lists")
-    @any_role_mode.setter
-    def any_role_mode(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "any_role_mode", value)
+    @external_oauth_allowed_roles_lists.setter
+    def external_oauth_allowed_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "external_oauth_allowed_roles_lists", value)
     @property
-    @pulumi.getter(name="audienceUrls")
-    def audience_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    @pulumi.getter(name="externalOauthAnyRoleMode")
+    def external_oauth_any_role_mode(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
+        Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
         """
-        return pulumi.get(self, "audience_urls")
+        return pulumi.get(self, "external_oauth_any_role_mode")
-    @audience_urls.setter
-    def audience_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "audience_urls", value)
+    @external_oauth_any_role_mode.setter
+    def external_oauth_any_role_mode(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_oauth_any_role_mode", value)
     @property
-    @pulumi.getter(name="blockedRoles")
-    def blocked_roles(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    @pulumi.getter(name="externalOauthAudienceLists")
+    def external_oauth_audience_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Specifies the list of roles that a client cannot set as the primary role. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
+        Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
         """
-        return pulumi.get(self, "blocked_roles")
+        return pulumi.get(self, "external_oauth_audience_lists")
-    @blocked_roles.setter
-    def blocked_roles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "blocked_roles", value)
+    @external_oauth_audience_lists.setter
+    def external_oauth_audience_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "external_oauth_audience_lists", value)
     @property
-    @pulumi.getter
-    def comment(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthBlockedRolesLists")
+    def external_oauth_blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Specifies a comment for the OAuth integration.
+        Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
         """
-        return pulumi.get(self, "comment")
+        return pulumi.get(self, "external_oauth_blocked_roles_lists")
-    @comment.setter
-    def comment(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "comment", value)
+    @external_oauth_blocked_roles_lists.setter
+    def external_oauth_blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "external_oauth_blocked_roles_lists", value)
     @property
-    @pulumi.getter(name="jwsKeysUrls")
-    def jws_keys_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    @pulumi.getter(name="externalOauthJwsKeysUrls")
+    def external_oauth_jws_keys_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3.
+        Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "jws_keys_urls")
+        return pulumi.get(self, "external_oauth_jws_keys_urls")
-    @jws_keys_urls.setter
-    def jws_keys_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "jws_keys_urls", value)
+    @external_oauth_jws_keys_urls.setter
+    def external_oauth_jws_keys_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "external_oauth_jws_keys_urls", value)
     @property
-    @pulumi.getter
-    def name(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthRsaPublicKey")
+    def external_oauth_rsa_public_key(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
+        Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "name")
+        return pulumi.get(self, "external_oauth_rsa_public_key")
-    @name.setter
-    def name(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "name", value)
+    @external_oauth_rsa_public_key.setter
+    def external_oauth_rsa_public_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_oauth_rsa_public_key", value)
     @property
-    @pulumi.getter(name="rsaPublicKey")
-    def rsa_public_key(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthRsaPublicKey2")
+    def external_oauth_rsa_public_key2(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers.
+        Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "rsa_public_key")
+        return pulumi.get(self, "external_oauth_rsa_public_key2")
-    @rsa_public_key.setter
-    def rsa_public_key(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "rsa_public_key", value)
+    @external_oauth_rsa_public_key2.setter
+    def external_oauth_rsa_public_key2(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_oauth_rsa_public_key2", value)
     @property
-    @pulumi.getter(name="rsaPublicKey2")
-    def rsa_public_key2(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthScopeDelimiter")
+    def external_oauth_scope_delimiter(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation.
+        Specifies the scope delimiter in the authorization token.
         """
-        return pulumi.get(self, "rsa_public_key2")
+        return pulumi.get(self, "external_oauth_scope_delimiter")
-    @rsa_public_key2.setter
-    def rsa_public_key2(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "rsa_public_key2", value)
+    @external_oauth_scope_delimiter.setter
+    def external_oauth_scope_delimiter(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_oauth_scope_delimiter", value)
     @property
-    @pulumi.getter(name="scopeDelimiter")
-    def scope_delimiter(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthScopeMappingAttribute")
+    def external_oauth_scope_mapping_attribute(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the scope delimiter in the authorization token.
+        Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "scope_delimiter")
+        return pulumi.get(self, "external_oauth_scope_mapping_attribute")
-    @scope_delimiter.setter
-    def scope_delimiter(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "scope_delimiter", value)
+    @external_oauth_scope_mapping_attribute.setter
+    def external_oauth_scope_mapping_attribute(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_oauth_scope_mapping_attribute", value)
     @property
-    @pulumi.getter(name="scopeMappingAttribute")
-    def scope_mapping_attribute(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter
+    def name(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the access token claim to map the access token to an account role.
+        Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
-        return pulumi.get(self, "scope_mapping_attribute")
+        return pulumi.get(self, "name")
-    @scope_mapping_attribute.setter
-    def scope_mapping_attribute(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "scope_mapping_attribute", value)
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "name", value)
 @pulumi.input_type
 class _ExternalOauthIntegrationState:
     def __init__(__self__, *,
-                 allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 any_role_mode: Optional[pulumi.Input[str]] = None,
-                 audience_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 blocked_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  comment: Optional[pulumi.Input[str]] = None,
-                 created_on: Optional[pulumi.Input[str]] = None,
+                 describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationDescribeOutputArgs']]]] = None,
                  enabled: Optional[pulumi.Input[bool]] = None,
-                 issuer: Optional[pulumi.Input[str]] = None,
-                 jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_any_role_mode: Optional[pulumi.Input[str]] = None,
+                 external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_issuer: Optional[pulumi.Input[str]] = None,
+                 external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_rsa_public_key: Optional[pulumi.Input[str]] = None,
+                 external_oauth_rsa_public_key2: Optional[pulumi.Input[str]] = None,
+                 external_oauth_scope_delimiter: Optional[pulumi.Input[str]] = None,
+                 external_oauth_scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
+                 external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[str]] = None,
+                 external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_type: Optional[pulumi.Input[str]] = None,
+                 fully_qualified_name: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
-                 rsa_public_key: Optional[pulumi.Input[str]] = None,
-                 rsa_public_key2: Optional[pulumi.Input[str]] = None,
-                 scope_delimiter: Optional[pulumi.Input[str]] = None,
-                 scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
-                 snowflake_user_mapping_attribute: Optional[pulumi.Input[str]] = None,
-                 token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 type: Optional[pulumi.Input[str]] = None):
+                 related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationRelatedParameterArgs']]]] = None,
+                 show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationShowOutputArgs']]]] = None):
         """
         Input properties used for looking up and filtering ExternalOauthIntegration resources.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_roles: Specifies the list of roles that the client can set as the primary role.
-        :param pulumi.Input[str] any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] audience_urls: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles: Specifies the list of roles that a client cannot set as the primary role. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
         :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
-        :param pulumi.Input[str] created_on: Date and time when the External OAUTH integration was created.
+        :param pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
         :param pulumi.Input[bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
-        :param pulumi.Input[str] issuer: Specifies the URL to define the OAuth 2.0 authorization server.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3.
-        :param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
-        :param pulumi.Input[str] rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers.
-        :param pulumi.Input[str] rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation.
-        :param pulumi.Input[str] scope_delimiter: Specifies the scope delimiter in the authorization token.
-        :param pulumi.Input[str] scope_mapping_attribute: Specifies the access token claim to map the access token to an account role.
-        :param pulumi.Input[str] snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record.
-        :param pulumi.Input[str] type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server.
-        """
-        if allowed_roles is not None:
-            pulumi.set(__self__, "allowed_roles", allowed_roles)
-        if any_role_mode is not None:
-            pulumi.set(__self__, "any_role_mode", any_role_mode)
-        if audience_urls is not None:
-            pulumi.set(__self__, "audience_urls", audience_urls)
-        if blocked_roles is not None:
-            pulumi.set(__self__, "blocked_roles", blocked_roles)
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
+        :param pulumi.Input[str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
+        :param pulumi.Input[str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
+        :param pulumi.Input[str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
+        :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
+        :param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationRelatedParameterArgs']]] related_parameters: Parameters related to this security integration.
+        :param pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATIONS` for the given security integration.
+        """
         if comment is not None:
             pulumi.set(__self__, "comment", comment)
-        if created_on is not None:
-            pulumi.set(__self__, "created_on", created_on)
+        if describe_outputs is not None:
+            pulumi.set(__self__, "describe_outputs", describe_outputs)
         if enabled is not None:
             pulumi.set(__self__, "enabled", enabled)
-        if issuer is not None:
-            pulumi.set(__self__, "issuer", issuer)
-        if jws_keys_urls is not None:
-            pulumi.set(__self__, "jws_keys_urls", jws_keys_urls)
+        if external_oauth_allowed_roles_lists is not None:
+            pulumi.set(__self__, "external_oauth_allowed_roles_lists", external_oauth_allowed_roles_lists)
+        if external_oauth_any_role_mode is not None:
+            pulumi.set(__self__, "external_oauth_any_role_mode", external_oauth_any_role_mode)
+        if external_oauth_audience_lists is not None:
+            pulumi.set(__self__, "external_oauth_audience_lists", external_oauth_audience_lists)
+        if external_oauth_blocked_roles_lists is not None:
+            pulumi.set(__self__, "external_oauth_blocked_roles_lists", external_oauth_blocked_roles_lists)
+        if external_oauth_issuer is not None:
+            pulumi.set(__self__, "external_oauth_issuer", external_oauth_issuer)
+        if external_oauth_jws_keys_urls is not None:
+            pulumi.set(__self__, "external_oauth_jws_keys_urls", external_oauth_jws_keys_urls)
+        if external_oauth_rsa_public_key is not None:
+            pulumi.set(__self__, "external_oauth_rsa_public_key", external_oauth_rsa_public_key)
+        if external_oauth_rsa_public_key2 is not None:
+            pulumi.set(__self__, "external_oauth_rsa_public_key2", external_oauth_rsa_public_key2)
+        if external_oauth_scope_delimiter is not None:
+            pulumi.set(__self__, "external_oauth_scope_delimiter", external_oauth_scope_delimiter)
+        if external_oauth_scope_mapping_attribute is not None:
+            pulumi.set(__self__, "external_oauth_scope_mapping_attribute", external_oauth_scope_mapping_attribute)
+        if external_oauth_snowflake_user_mapping_attribute is not None:
+            pulumi.set(__self__, "external_oauth_snowflake_user_mapping_attribute", external_oauth_snowflake_user_mapping_attribute)
+        if external_oauth_token_user_mapping_claims is not None:
+            pulumi.set(__self__, "external_oauth_token_user_mapping_claims", external_oauth_token_user_mapping_claims)
+        if external_oauth_type is not None:
+            pulumi.set(__self__, "external_oauth_type", external_oauth_type)
+        if fully_qualified_name is not None:
+            pulumi.set(__self__, "fully_qualified_name", fully_qualified_name)
         if name is not None:
             pulumi.set(__self__, "name", name)
-        if rsa_public_key is not None:
-            pulumi.set(__self__, "rsa_public_key", rsa_public_key)
-        if rsa_public_key2 is not None:
-            pulumi.set(__self__, "rsa_public_key2", rsa_public_key2)
-        if scope_delimiter is not None:
-            pulumi.set(__self__, "scope_delimiter", scope_delimiter)
-        if scope_mapping_attribute is not None:
-            pulumi.set(__self__, "scope_mapping_attribute", scope_mapping_attribute)
-        if snowflake_user_mapping_attribute is not None:
-            pulumi.set(__self__, "snowflake_user_mapping_attribute", snowflake_user_mapping_attribute)
-        if token_user_mapping_claims is not None:
-            pulumi.set(__self__, "token_user_mapping_claims", token_user_mapping_claims)
-        if type is not None:
-            pulumi.set(__self__, "type", type)
+        if related_parameters is not None:
+            pulumi.set(__self__, "related_parameters", related_parameters)
+        if show_outputs is not None:
+            pulumi.set(__self__, "show_outputs", show_outputs)
     @property
-    @pulumi.getter(name="allowedRoles")
-    def allowed_roles(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    @pulumi.getter
+    def comment(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the list of roles that the client can set as the primary role.
+        Specifies a comment for the OAuth integration.
         """
-        return pulumi.get(self, "allowed_roles")
+        return pulumi.get(self, "comment")
-    @allowed_roles.setter
-    def allowed_roles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "allowed_roles", value)
+    @comment.setter
+    def comment(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "comment", value)
     @property
-    @pulumi.getter(name="anyRoleMode")
-    def any_role_mode(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="describeOutputs")
+    def describe_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationDescribeOutputArgs']]]]:
         """
-        Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token.
+        Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
         """
-        return pulumi.get(self, "any_role_mode")
+        return pulumi.get(self, "describe_outputs")
-    @any_role_mode.setter
-    def any_role_mode(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "any_role_mode", value)
+    @describe_outputs.setter
+    def describe_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationDescribeOutputArgs']]]]):
+        pulumi.set(self, "describe_outputs", value)
     @property
-    @pulumi.getter(name="audienceUrls")
-    def audience_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    @pulumi.getter
+    def enabled(self) -> Optional[pulumi.Input[bool]]:
         """
-        Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
+        Specifies whether to initiate operation of the integration or suspend it.
         """
-        return pulumi.get(self, "audience_urls")
+        return pulumi.get(self, "enabled")
-    @audience_urls.setter
-    def audience_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "audience_urls", value)
+    @enabled.setter
+    def enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enabled", value)
     @property
-    @pulumi.getter(name="blockedRoles")
-    def blocked_roles(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    @pulumi.getter(name="externalOauthAllowedRolesLists")
+    def external_oauth_allowed_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Specifies the list of roles that a client cannot set as the primary role. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
+        Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
         """
-        return pulumi.get(self, "blocked_roles")
+        return pulumi.get(self, "external_oauth_allowed_roles_lists")
-    @blocked_roles.setter
-    def blocked_roles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "blocked_roles", value)
+    @external_oauth_allowed_roles_lists.setter
+    def external_oauth_allowed_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "external_oauth_allowed_roles_lists", value)
     @property
-    @pulumi.getter
-    def comment(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthAnyRoleMode")
+    def external_oauth_any_role_mode(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies a comment for the OAuth integration.
+        Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
         """
-        return pulumi.get(self, "comment")
+        return pulumi.get(self, "external_oauth_any_role_mode")
-    @comment.setter
-    def comment(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "comment", value)
+    @external_oauth_any_role_mode.setter
+    def external_oauth_any_role_mode(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_oauth_any_role_mode", value)
     @property
-    @pulumi.getter(name="createdOn")
-    def created_on(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthAudienceLists")
+    def external_oauth_audience_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Date and time when the External OAUTH integration was created.
+        Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
         """
-        return pulumi.get(self, "created_on")
+        return pulumi.get(self, "external_oauth_audience_lists")
-    @created_on.setter
-    def created_on(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "created_on", value)
+    @external_oauth_audience_lists.setter
+    def external_oauth_audience_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "external_oauth_audience_lists", value)
     @property
-    @pulumi.getter
-    def enabled(self) -> Optional[pulumi.Input[bool]]:
+    @pulumi.getter(name="externalOauthBlockedRolesLists")
+    def external_oauth_blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Specifies whether to initiate operation of the integration or suspend it.
+        Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
         """
-        return pulumi.get(self, "enabled")
+        return pulumi.get(self, "external_oauth_blocked_roles_lists")
-    @enabled.setter
-    def enabled(self, value: Optional[pulumi.Input[bool]]):
-        pulumi.set(self, "enabled", value)
+    @external_oauth_blocked_roles_lists.setter
+    def external_oauth_blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "external_oauth_blocked_roles_lists", value)
     @property
-    @pulumi.getter
-    def issuer(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthIssuer")
+    def external_oauth_issuer(self) -> Optional[pulumi.Input[str]]:
         """
         Specifies the URL to define the OAuth 2.0 authorization server.
         """
-        return pulumi.get(self, "issuer")
+        return pulumi.get(self, "external_oauth_issuer")
-    @issuer.setter
-    def issuer(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "issuer", value)
+    @external_oauth_issuer.setter
+    def external_oauth_issuer(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_oauth_issuer", value)
     @property
-    @pulumi.getter(name="jwsKeysUrls")
-    def jws_keys_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    @pulumi.getter(name="externalOauthJwsKeysUrls")
+    def external_oauth_jws_keys_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3.
+        Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "jws_keys_urls")
+        return pulumi.get(self, "external_oauth_jws_keys_urls")
-    @jws_keys_urls.setter
-    def jws_keys_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "jws_keys_urls", value)
+    @external_oauth_jws_keys_urls.setter
+    def external_oauth_jws_keys_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "external_oauth_jws_keys_urls", value)
     @property
-    @pulumi.getter
-    def name(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthRsaPublicKey")
+    def external_oauth_rsa_public_key(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
+        Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "name")
+        return pulumi.get(self, "external_oauth_rsa_public_key")
-    @name.setter
-    def name(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "name", value)
+    @external_oauth_rsa_public_key.setter
+    def external_oauth_rsa_public_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_oauth_rsa_public_key", value)
     @property
-    @pulumi.getter(name="rsaPublicKey")
-    def rsa_public_key(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthRsaPublicKey2")
+    def external_oauth_rsa_public_key2(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers.
+        Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "rsa_public_key")
+        return pulumi.get(self, "external_oauth_rsa_public_key2")
-    @rsa_public_key.setter
-    def rsa_public_key(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "rsa_public_key", value)
+    @external_oauth_rsa_public_key2.setter
+    def external_oauth_rsa_public_key2(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_oauth_rsa_public_key2", value)
     @property
-    @pulumi.getter(name="rsaPublicKey2")
-    def rsa_public_key2(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthScopeDelimiter")
+    def external_oauth_scope_delimiter(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation.
+        Specifies the scope delimiter in the authorization token.
         """
-        return pulumi.get(self, "rsa_public_key2")
+        return pulumi.get(self, "external_oauth_scope_delimiter")
-    @rsa_public_key2.setter
-    def rsa_public_key2(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "rsa_public_key2", value)
+    @external_oauth_scope_delimiter.setter
+    def external_oauth_scope_delimiter(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_oauth_scope_delimiter", value)
     @property
-    @pulumi.getter(name="scopeDelimiter")
-    def scope_delimiter(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthScopeMappingAttribute")
+    def external_oauth_scope_mapping_attribute(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the scope delimiter in the authorization token.
+        Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "scope_delimiter")
+        return pulumi.get(self, "external_oauth_scope_mapping_attribute")
-    @scope_delimiter.setter
-    def scope_delimiter(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "scope_delimiter", value)
+    @external_oauth_scope_mapping_attribute.setter
+    def external_oauth_scope_mapping_attribute(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_oauth_scope_mapping_attribute", value)
     @property
-    @pulumi.getter(name="scopeMappingAttribute")
-    def scope_mapping_attribute(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthSnowflakeUserMappingAttribute")
+    def external_oauth_snowflake_user_mapping_attribute(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the access token claim to map the access token to an account role.
+        Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
         """
-        return pulumi.get(self, "scope_mapping_attribute")
+        return pulumi.get(self, "external_oauth_snowflake_user_mapping_attribute")
-    @scope_mapping_attribute.setter
-    def scope_mapping_attribute(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "scope_mapping_attribute", value)
+    @external_oauth_snowflake_user_mapping_attribute.setter
+    def external_oauth_snowflake_user_mapping_attribute(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_oauth_snowflake_user_mapping_attribute", value)
     @property
-    @pulumi.getter(name="snowflakeUserMappingAttribute")
-    def snowflake_user_mapping_attribute(self) -> Optional[pulumi.Input[str]]:
+    @pulumi.getter(name="externalOauthTokenUserMappingClaims")
+    def external_oauth_token_user_mapping_claims(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record.
+        Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "snowflake_user_mapping_attribute")
+        return pulumi.get(self, "external_oauth_token_user_mapping_claims")
-    @snowflake_user_mapping_attribute.setter
-    def snowflake_user_mapping_attribute(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "snowflake_user_mapping_attribute", value)
+    @external_oauth_token_user_mapping_claims.setter
+    def external_oauth_token_user_mapping_claims(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "external_oauth_token_user_mapping_claims", value)
     @property
-    @pulumi.getter(name="tokenUserMappingClaims")
-    def token_user_mapping_claims(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    @pulumi.getter(name="externalOauthType")
+    def external_oauth_type(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record.
+        Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
         """
-        return pulumi.get(self, "token_user_mapping_claims")
+        return pulumi.get(self, "external_oauth_type")
-    @token_user_mapping_claims.setter
-    def token_user_mapping_claims(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "token_user_mapping_claims", value)
+    @external_oauth_type.setter
+    def external_oauth_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "external_oauth_type", value)
+    @property
+    @pulumi.getter(name="fullyQualifiedName")
+    def fully_qualified_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
+        """
+        return pulumi.get(self, "fully_qualified_name")
+    @fully_qualified_name.setter
+    def fully_qualified_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "fully_qualified_name", value)
     @property
     @pulumi.getter
-    def type(self) -> Optional[pulumi.Input[str]]:
+    def name(self) -> Optional[pulumi.Input[str]]:
         """
-        Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server.
+        Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
-        return pulumi.get(self, "type")
+        return pulumi.get(self, "name")
-    @type.setter
-    def type(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "type", value)
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "name", value)
+    @property
+    @pulumi.getter(name="relatedParameters")
+    def related_parameters(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationRelatedParameterArgs']]]]:
+        """
+        Parameters related to this security integration.
+        """
+        return pulumi.get(self, "related_parameters")
+    @related_parameters.setter
+    def related_parameters(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationRelatedParameterArgs']]]]):
+        pulumi.set(self, "related_parameters", value)
+    @property
+    @pulumi.getter(name="showOutputs")
+    def show_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationShowOutputArgs']]]]:
+        """
+        Outputs the result of `SHOW SECURITY INTEGRATIONS` for the given security integration.
+        """
+        return pulumi.get(self, "show_outputs")
+    @show_outputs.setter
+    def show_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationShowOutputArgs']]]]):
+        pulumi.set(self, "show_outputs", value)
 class ExternalOauthIntegration(pulumi.CustomResource):
@@ -555,66 +610,48 @@ class ExternalOauthIntegration(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 any_role_mode: Optional[pulumi.Input[str]] = None,
-                 audience_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 blocked_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  comment: Optional[pulumi.Input[str]] = None,
                  enabled: Optional[pulumi.Input[bool]] = None,
-                 issuer: Optional[pulumi.Input[str]] = None,
-                 jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_any_role_mode: Optional[pulumi.Input[str]] = None,
+                 external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_issuer: Optional[pulumi.Input[str]] = None,
+                 external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_rsa_public_key: Optional[pulumi.Input[str]] = None,
+                 external_oauth_rsa_public_key2: Optional[pulumi.Input[str]] = None,
+                 external_oauth_scope_delimiter: Optional[pulumi.Input[str]] = None,
+                 external_oauth_scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
+                 external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[str]] = None,
+                 external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_type: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
-                 rsa_public_key: Optional[pulumi.Input[str]] = None,
-                 rsa_public_key2: Optional[pulumi.Input[str]] = None,
-                 scope_delimiter: Optional[pulumi.Input[str]] = None,
-                 scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
-                 snowflake_user_mapping_attribute: Optional[pulumi.Input[str]] = None,
-                 token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 type: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
-        An External OAuth security integration allows a client to use a third-party authorization server to obtain the access tokens needed to interact with Snowflake.
-        ## Example Usage
-        ```python
-        import pulumi
-        import pulumi_snowflake as snowflake
-        azure = snowflake.ExternalOauthIntegration("azure",
-            audience_urls=["https://analysis.windows.net/powerbi/connector/Snowflake"],
-            enabled=True,
-            issuer="https://sts.windows.net/00000000-0000-0000-0000-000000000000",
-            jws_keys_urls=["https://login.windows.net/common/discovery/keys"],
-            snowflake_user_mapping_attribute="LOGIN_NAME",
-            token_user_mapping_claims=["upn"],
-            type="AZURE")
-        ```
         ## Import
         ```sh
-         $ pulumi import snowflake:index/externalOauthIntegration:ExternalOauthIntegration example name
+        $ pulumi import snowflake:index/externalOauthIntegration:ExternalOauthIntegration example '"<integration_name>"'
         ```
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_roles: Specifies the list of roles that the client can set as the primary role.
-        :param pulumi.Input[str] any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] audience_urls: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles: Specifies the list of roles that a client cannot set as the primary role. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
         :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
         :param pulumi.Input[bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
-        :param pulumi.Input[str] issuer: Specifies the URL to define the OAuth 2.0 authorization server.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3.
-        :param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
-        :param pulumi.Input[str] rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers.
-        :param pulumi.Input[str] rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation.
-        :param pulumi.Input[str] scope_delimiter: Specifies the scope delimiter in the authorization token.
-        :param pulumi.Input[str] scope_mapping_attribute: Specifies the access token claim to map the access token to an account role.
-        :param pulumi.Input[str] snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record.
-        :param pulumi.Input[str] type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
+        :param pulumi.Input[str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
+        :param pulumi.Input[str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
+        :param pulumi.Input[str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
+        :param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
         """
         ...
     @overload
@@ -623,28 +660,10 @@ class ExternalOauthIntegration(pulumi.CustomResource):
                  args: ExternalOauthIntegrationArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
-        An External OAuth security integration allows a client to use a third-party authorization server to obtain the access tokens needed to interact with Snowflake.
-        ## Example Usage
-        ```python
-        import pulumi
-        import pulumi_snowflake as snowflake
-        azure = snowflake.ExternalOauthIntegration("azure",
-            audience_urls=["https://analysis.windows.net/powerbi/connector/Snowflake"],
-            enabled=True,
-            issuer="https://sts.windows.net/00000000-0000-0000-0000-000000000000",
-            jws_keys_urls=["https://login.windows.net/common/discovery/keys"],
-            snowflake_user_mapping_attribute="LOGIN_NAME",
-            token_user_mapping_claims=["upn"],
-            type="AZURE")
-        ```
         ## Import
         ```sh
-         $ pulumi import snowflake:index/externalOauthIntegration:ExternalOauthIntegration example name
+        $ pulumi import snowflake:index/externalOauthIntegration:ExternalOauthIntegration example '"<integration_name>"'
         ```
         :param str resource_name: The name of the resource.
@@ -662,22 +681,22 @@ class ExternalOauthIntegration(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 any_role_mode: Optional[pulumi.Input[str]] = None,
-                 audience_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 blocked_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  comment: Optional[pulumi.Input[str]] = None,
                  enabled: Optional[pulumi.Input[bool]] = None,
-                 issuer: Optional[pulumi.Input[str]] = None,
-                 jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_any_role_mode: Optional[pulumi.Input[str]] = None,
+                 external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_issuer: Optional[pulumi.Input[str]] = None,
+                 external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_rsa_public_key: Optional[pulumi.Input[str]] = None,
+                 external_oauth_rsa_public_key2: Optional[pulumi.Input[str]] = None,
+                 external_oauth_scope_delimiter: Optional[pulumi.Input[str]] = None,
+                 external_oauth_scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
+                 external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[str]] = None,
+                 external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 external_oauth_type: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
-                 rsa_public_key: Optional[pulumi.Input[str]] = None,
-                 rsa_public_key2: Optional[pulumi.Input[str]] = None,
-                 scope_delimiter: Optional[pulumi.Input[str]] = None,
-                 scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
-                 snowflake_user_mapping_attribute: Optional[pulumi.Input[str]] = None,
-                 token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 type: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -687,33 +706,36 @@ class ExternalOauthIntegration(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = ExternalOauthIntegrationArgs.__new__(ExternalOauthIntegrationArgs)
-            __props__.__dict__["allowed_roles"] = allowed_roles
-            __props__.__dict__["any_role_mode"] = any_role_mode
-            __props__.__dict__["audience_urls"] = audience_urls
-            __props__.__dict__["blocked_roles"] = blocked_roles
             __props__.__dict__["comment"] = comment
             if enabled is None and not opts.urn:
                 raise TypeError("Missing required property 'enabled'")
             __props__.__dict__["enabled"] = enabled
-            if issuer is None and not opts.urn:
-                raise TypeError("Missing required property 'issuer'")
-            __props__.__dict__["issuer"] = issuer
-            __props__.__dict__["jws_keys_urls"] = jws_keys_urls
+            __props__.__dict__["external_oauth_allowed_roles_lists"] = external_oauth_allowed_roles_lists
+            __props__.__dict__["external_oauth_any_role_mode"] = external_oauth_any_role_mode
+            __props__.__dict__["external_oauth_audience_lists"] = external_oauth_audience_lists
+            __props__.__dict__["external_oauth_blocked_roles_lists"] = external_oauth_blocked_roles_lists
+            if external_oauth_issuer is None and not opts.urn:
+                raise TypeError("Missing required property 'external_oauth_issuer'")
+            __props__.__dict__["external_oauth_issuer"] = external_oauth_issuer
+            __props__.__dict__["external_oauth_jws_keys_urls"] = external_oauth_jws_keys_urls
+            __props__.__dict__["external_oauth_rsa_public_key"] = external_oauth_rsa_public_key
+            __props__.__dict__["external_oauth_rsa_public_key2"] = external_oauth_rsa_public_key2
+            __props__.__dict__["external_oauth_scope_delimiter"] = external_oauth_scope_delimiter
+            __props__.__dict__["external_oauth_scope_mapping_attribute"] = external_oauth_scope_mapping_attribute
+            if external_oauth_snowflake_user_mapping_attribute is None and not opts.urn:
+                raise TypeError("Missing required property 'external_oauth_snowflake_user_mapping_attribute'")
+            __props__.__dict__["external_oauth_snowflake_user_mapping_attribute"] = external_oauth_snowflake_user_mapping_attribute
+            if external_oauth_token_user_mapping_claims is None and not opts.urn:
+                raise TypeError("Missing required property 'external_oauth_token_user_mapping_claims'")
+            __props__.__dict__["external_oauth_token_user_mapping_claims"] = external_oauth_token_user_mapping_claims
+            if external_oauth_type is None and not opts.urn:
+                raise TypeError("Missing required property 'external_oauth_type'")
+            __props__.__dict__["external_oauth_type"] = external_oauth_type
             __props__.__dict__["name"] = name
-            __props__.__dict__["rsa_public_key"] = rsa_public_key
-            __props__.__dict__["rsa_public_key2"] = rsa_public_key2
-            __props__.__dict__["scope_delimiter"] = scope_delimiter
-            __props__.__dict__["scope_mapping_attribute"] = scope_mapping_attribute
-            if snowflake_user_mapping_attribute is None and not opts.urn:
-                raise TypeError("Missing required property 'snowflake_user_mapping_attribute'")
-            __props__.__dict__["snowflake_user_mapping_attribute"] = snowflake_user_mapping_attribute
-            if token_user_mapping_claims is None and not opts.urn:
-                raise TypeError("Missing required property 'token_user_mapping_claims'")
-            __props__.__dict__["token_user_mapping_claims"] = token_user_mapping_claims
-            if type is None and not opts.urn:
-                raise TypeError("Missing required property 'type'")
-            __props__.__dict__["type"] = type
-            __props__.__dict__["created_on"] = None
+            __props__.__dict__["describe_outputs"] = None
+            __props__.__dict__["fully_qualified_name"] = None
+            __props__.__dict__["related_parameters"] = None
+            __props__.__dict__["show_outputs"] = None
         super(ExternalOauthIntegration, __self__).__init__(
             'snowflake:index/externalOauthIntegration:ExternalOauthIntegration',
             resource_name,
@@ -724,23 +746,26 @@ class ExternalOauthIntegration(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
-            allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            any_role_mode: Optional[pulumi.Input[str]] = None,
-            audience_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            blocked_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
             comment: Optional[pulumi.Input[str]] = None,
-            created_on: Optional[pulumi.Input[str]] = None,
+            describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationDescribeOutputArgs', 'ExternalOauthIntegrationDescribeOutputArgsDict']]]]] = None,
             enabled: Optional[pulumi.Input[bool]] = None,
-            issuer: Optional[pulumi.Input[str]] = None,
-            jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            external_oauth_any_role_mode: Optional[pulumi.Input[str]] = None,
+            external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            external_oauth_issuer: Optional[pulumi.Input[str]] = None,
+            external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            external_oauth_rsa_public_key: Optional[pulumi.Input[str]] = None,
+            external_oauth_rsa_public_key2: Optional[pulumi.Input[str]] = None,
+            external_oauth_scope_delimiter: Optional[pulumi.Input[str]] = None,
+            external_oauth_scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
+            external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[str]] = None,
+            external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+            external_oauth_type: Optional[pulumi.Input[str]] = None,
+            fully_qualified_name: Optional[pulumi.Input[str]] = None,
             name: Optional[pulumi.Input[str]] = None,
-            rsa_public_key: Optional[pulumi.Input[str]] = None,
-            rsa_public_key2: Optional[pulumi.Input[str]] = None,
-            scope_delimiter: Optional[pulumi.Input[str]] = None,
-            scope_mapping_attribute: Optional[pulumi.Input[str]] = None,
-            snowflake_user_mapping_attribute: Optional[pulumi.Input[str]] = None,
-            token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            type: Optional[pulumi.Input[str]] = None) -> 'ExternalOauthIntegration':
+            related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationRelatedParameterArgs', 'ExternalOauthIntegrationRelatedParameterArgsDict']]]]] = None,
+            show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationShowOutputArgs', 'ExternalOauthIntegrationShowOutputArgsDict']]]]] = None) -> 'ExternalOauthIntegration':
         """
         Get an existing ExternalOauthIntegration resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -748,180 +773,210 @@ class ExternalOauthIntegration(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_roles: Specifies the list of roles that the client can set as the primary role.
-        :param pulumi.Input[str] any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] audience_urls: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] blocked_roles: Specifies the list of roles that a client cannot set as the primary role. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
         :param pulumi.Input[str] comment: Specifies a comment for the OAuth integration.
-        :param pulumi.Input[str] created_on: Date and time when the External OAUTH integration was created.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationDescribeOutputArgs', 'ExternalOauthIntegrationDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
         :param pulumi.Input[bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
-        :param pulumi.Input[str] issuer: Specifies the URL to define the OAuth 2.0 authorization server.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3.
-        :param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
-        :param pulumi.Input[str] rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers.
-        :param pulumi.Input[str] rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation.
-        :param pulumi.Input[str] scope_delimiter: Specifies the scope delimiter in the authorization token.
-        :param pulumi.Input[str] scope_mapping_attribute: Specifies the access token claim to map the access token to an account role.
-        :param pulumi.Input[str] snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record.
-        :param pulumi.Input[str] type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
+        :param pulumi.Input[str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
+        :param pulumi.Input[str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
+        :param pulumi.Input[str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
+        :param pulumi.Input[str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
+        :param pulumi.Input[str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
+        :param pulumi.Input[str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationRelatedParameterArgs', 'ExternalOauthIntegrationRelatedParameterArgsDict']]]] related_parameters: Parameters related to this security integration.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationShowOutputArgs', 'ExternalOauthIntegrationShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATIONS` for the given security integration.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
         __props__ = _ExternalOauthIntegrationState.__new__(_ExternalOauthIntegrationState)
-        __props__.__dict__["allowed_roles"] = allowed_roles
-        __props__.__dict__["any_role_mode"] = any_role_mode
-        __props__.__dict__["audience_urls"] = audience_urls
-        __props__.__dict__["blocked_roles"] = blocked_roles
         __props__.__dict__["comment"] = comment
-        __props__.__dict__["created_on"] = created_on
+        __props__.__dict__["describe_outputs"] = describe_outputs
         __props__.__dict__["enabled"] = enabled
-        __props__.__dict__["issuer"] = issuer
-        __props__.__dict__["jws_keys_urls"] = jws_keys_urls
+        __props__.__dict__["external_oauth_allowed_roles_lists"] = external_oauth_allowed_roles_lists
+        __props__.__dict__["external_oauth_any_role_mode"] = external_oauth_any_role_mode
+        __props__.__dict__["external_oauth_audience_lists"] = external_oauth_audience_lists
+        __props__.__dict__["external_oauth_blocked_roles_lists"] = external_oauth_blocked_roles_lists
+        __props__.__dict__["external_oauth_issuer"] = external_oauth_issuer
+        __props__.__dict__["external_oauth_jws_keys_urls"] = external_oauth_jws_keys_urls
+        __props__.__dict__["external_oauth_rsa_public_key"] = external_oauth_rsa_public_key
+        __props__.__dict__["external_oauth_rsa_public_key2"] = external_oauth_rsa_public_key2
+        __props__.__dict__["external_oauth_scope_delimiter"] = external_oauth_scope_delimiter
+        __props__.__dict__["external_oauth_scope_mapping_attribute"] = external_oauth_scope_mapping_attribute
+        __props__.__dict__["external_oauth_snowflake_user_mapping_attribute"] = external_oauth_snowflake_user_mapping_attribute
+        __props__.__dict__["external_oauth_token_user_mapping_claims"] = external_oauth_token_user_mapping_claims
+        __props__.__dict__["external_oauth_type"] = external_oauth_type
+        __props__.__dict__["fully_qualified_name"] = fully_qualified_name
         __props__.__dict__["name"] = name
-        __props__.__dict__["rsa_public_key"] = rsa_public_key
-        __props__.__dict__["rsa_public_key2"] = rsa_public_key2
-        __props__.__dict__["scope_delimiter"] = scope_delimiter
-        __props__.__dict__["scope_mapping_attribute"] = scope_mapping_attribute
-        __props__.__dict__["snowflake_user_mapping_attribute"] = snowflake_user_mapping_attribute
-        __props__.__dict__["token_user_mapping_claims"] = token_user_mapping_claims
-        __props__.__dict__["type"] = type
+        __props__.__dict__["related_parameters"] = related_parameters
+        __props__.__dict__["show_outputs"] = show_outputs
         return ExternalOauthIntegration(resource_name, opts=opts, __props__=__props__)
     @property
-    @pulumi.getter(name="allowedRoles")
-    def allowed_roles(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    @pulumi.getter
+    def comment(self) -> pulumi.Output[Optional[str]]:
         """
-        Specifies the list of roles that the client can set as the primary role.
+        Specifies a comment for the OAuth integration.
         """
-        return pulumi.get(self, "allowed_roles")
+        return pulumi.get(self, "comment")
     @property
-    @pulumi.getter(name="anyRoleMode")
-    def any_role_mode(self) -> pulumi.Output[Optional[str]]:
+    @pulumi.getter(name="describeOutputs")
+    def describe_outputs(self) -> pulumi.Output[Sequence['outputs.ExternalOauthIntegrationDescribeOutput']]:
         """
-        Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token.
+        Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
         """
-        return pulumi.get(self, "any_role_mode")
+        return pulumi.get(self, "describe_outputs")
     @property
-    @pulumi.getter(name="audienceUrls")
-    def audience_urls(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    @pulumi.getter
+    def enabled(self) -> pulumi.Output[bool]:
         """
-        Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
+        Specifies whether to initiate operation of the integration or suspend it.
         """
-        return pulumi.get(self, "audience_urls")
+        return pulumi.get(self, "enabled")
     @property
-    @pulumi.getter(name="blockedRoles")
-    def blocked_roles(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    @pulumi.getter(name="externalOauthAllowedRolesLists")
+    def external_oauth_allowed_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
         """
-        Specifies the list of roles that a client cannot set as the primary role. Do not include ACCOUNTADMIN, ORGADMIN or SECURITYADMIN as they are already implicitly enforced and will cause in-place updates.
+        Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
         """
-        return pulumi.get(self, "blocked_roles")
+        return pulumi.get(self, "external_oauth_allowed_roles_lists")
     @property
-    @pulumi.getter
-    def comment(self) -> pulumi.Output[Optional[str]]:
+    @pulumi.getter(name="externalOauthAnyRoleMode")
+    def external_oauth_any_role_mode(self) -> pulumi.Output[Optional[str]]:
         """
-        Specifies a comment for the OAuth integration.
+        Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
         """
-        return pulumi.get(self, "comment")
+        return pulumi.get(self, "external_oauth_any_role_mode")
     @property
-    @pulumi.getter(name="createdOn")
-    def created_on(self) -> pulumi.Output[str]:
+    @pulumi.getter(name="externalOauthAudienceLists")
+    def external_oauth_audience_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
         """
-        Date and time when the External OAUTH integration was created.
+        Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
         """
-        return pulumi.get(self, "created_on")
+        return pulumi.get(self, "external_oauth_audience_lists")
     @property
-    @pulumi.getter
-    def enabled(self) -> pulumi.Output[bool]:
+    @pulumi.getter(name="externalOauthBlockedRolesLists")
+    def external_oauth_blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[str]]]:
         """
-        Specifies whether to initiate operation of the integration or suspend it.
+        Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
         """
-        return pulumi.get(self, "enabled")
+        return pulumi.get(self, "external_oauth_blocked_roles_lists")
     @property
-    @pulumi.getter
-    def issuer(self) -> pulumi.Output[str]:
+    @pulumi.getter(name="externalOauthIssuer")
+    def external_oauth_issuer(self) -> pulumi.Output[str]:
         """
         Specifies the URL to define the OAuth 2.0 authorization server.
         """
-        return pulumi.get(self, "issuer")
+        return pulumi.get(self, "external_oauth_issuer")
     @property
-    @pulumi.getter(name="jwsKeysUrls")
-    def jws_keys_urls(self) -> pulumi.Output[Optional[Sequence[str]]]:
+    @pulumi.getter(name="externalOauthJwsKeysUrls")
+    def external_oauth_jws_keys_urls(self) -> pulumi.Output[Optional[Sequence[str]]]:
         """
-        Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3.
+        Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "jws_keys_urls")
+        return pulumi.get(self, "external_oauth_jws_keys_urls")
     @property
-    @pulumi.getter
-    def name(self) -> pulumi.Output[str]:
+    @pulumi.getter(name="externalOauthRsaPublicKey")
+    def external_oauth_rsa_public_key(self) -> pulumi.Output[Optional[str]]:
         """
-        Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account.
+        Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "name")
+        return pulumi.get(self, "external_oauth_rsa_public_key")
     @property
-    @pulumi.getter(name="rsaPublicKey")
-    def rsa_public_key(self) -> pulumi.Output[Optional[str]]:
+    @pulumi.getter(name="externalOauthRsaPublicKey2")
+    def external_oauth_rsa_public_key2(self) -> pulumi.Output[Optional[str]]:
         """
-        Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers.
+        Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "rsa_public_key")
+        return pulumi.get(self, "external_oauth_rsa_public_key2")
     @property
-    @pulumi.getter(name="rsaPublicKey2")
-    def rsa_public_key2(self) -> pulumi.Output[Optional[str]]:
+    @pulumi.getter(name="externalOauthScopeDelimiter")
+    def external_oauth_scope_delimiter(self) -> pulumi.Output[Optional[str]]:
         """
-        Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation.
+        Specifies the scope delimiter in the authorization token.
         """
-        return pulumi.get(self, "rsa_public_key2")
+        return pulumi.get(self, "external_oauth_scope_delimiter")
     @property
-    @pulumi.getter(name="scopeDelimiter")
-    def scope_delimiter(self) -> pulumi.Output[Optional[str]]:
+    @pulumi.getter(name="externalOauthScopeMappingAttribute")
+    def external_oauth_scope_mapping_attribute(self) -> pulumi.Output[Optional[str]]:
         """
-        Specifies the scope delimiter in the authorization token.
+        Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "scope_delimiter")
+        return pulumi.get(self, "external_oauth_scope_mapping_attribute")
     @property
-    @pulumi.getter(name="scopeMappingAttribute")
-    def scope_mapping_attribute(self) -> pulumi.Output[Optional[str]]:
+    @pulumi.getter(name="externalOauthSnowflakeUserMappingAttribute")
+    def external_oauth_snowflake_user_mapping_attribute(self) -> pulumi.Output[str]:
         """
-        Specifies the access token claim to map the access token to an account role.
+        Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
         """
-        return pulumi.get(self, "scope_mapping_attribute")
+        return pulumi.get(self, "external_oauth_snowflake_user_mapping_attribute")
     @property
-    @pulumi.getter(name="snowflakeUserMappingAttribute")
-    def snowflake_user_mapping_attribute(self) -> pulumi.Output[str]:
+    @pulumi.getter(name="externalOauthTokenUserMappingClaims")
+    def external_oauth_token_user_mapping_claims(self) -> pulumi.Output[Sequence[str]]:
         """
-        Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record.
+        Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
         """
-        return pulumi.get(self, "snowflake_user_mapping_attribute")
+        return pulumi.get(self, "external_oauth_token_user_mapping_claims")
     @property
-    @pulumi.getter(name="tokenUserMappingClaims")
-    def token_user_mapping_claims(self) -> pulumi.Output[Sequence[str]]:
+    @pulumi.getter(name="externalOauthType")
+    def external_oauth_type(self) -> pulumi.Output[str]:
         """
-        Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record.
+        Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
         """
-        return pulumi.get(self, "token_user_mapping_claims")
+        return pulumi.get(self, "external_oauth_type")
+    @property
+    @pulumi.getter(name="fullyQualifiedName")
+    def fully_qualified_name(self) -> pulumi.Output[str]:
+        """
+        Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
+        """
+        return pulumi.get(self, "fully_qualified_name")
     @property
     @pulumi.getter
-    def type(self) -> pulumi.Output[str]:
+    def name(self) -> pulumi.Output[str]:
+        """
+        Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+        """
+        return pulumi.get(self, "name")
+    @property
+    @pulumi.getter(name="relatedParameters")
+    def related_parameters(self) -> pulumi.Output[Sequence['outputs.ExternalOauthIntegrationRelatedParameter']]:
+        """
+        Parameters related to this security integration.
+        """
+        return pulumi.get(self, "related_parameters")
+    @property
+    @pulumi.getter(name="showOutputs")
+    def show_outputs(self) -> pulumi.Output[Sequence['outputs.ExternalOauthIntegrationShowOutput']]:
         """
-        Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server.
+        Outputs the result of `SHOW SECURITY INTEGRATIONS` for the given security integration.
         """
-        return pulumi.get(self, "type")
+        return pulumi.get(self, "show_outputs")

pulumi-snowflake 0.50.2a1709892015__py3-none-any.whl → 1.2.0a1736835738__py3-none-any.whl

Potentially problematic release.

pulumi-snowflake 0.50.2a1709892015py3-none-any.whl → 1.2.0a1736835738py3-none-any.whl